Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/AAA9E87A8F4811F19F9849D84411F970.roa
File:                     AAA9E87A8F4811F19F9849D84411F970.roa (raw, json)
Hash identifier:          lPnLM3IBe+agLx4ljzNp7JDQbn0Po4ZvE6p2YZXrWU0=
Subject key identifier:   B4:7C:DE:33:F3:8B:6A:95:87:A4:42:3A:F9:76:9A:15:4F:D1:A1:64
Certificate issuer:       /CN=A91DD92D/serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
Certificate serial:       5E
Authority key identifier: E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/AAA9E87A8F4811F19F9849D84411F970.roa
Signing time:             Mon 03 Aug 2026 14:36:09 +0000
ROA not before:           Mon 03 Aug 2026 14:36:09 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     149287
IP address blocks:        2402:5720:fff0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl
                          rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 08:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD92D, serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
        Validity
            Not Before: Aug  3 14:36:09 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a70a759-ce9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:2a:af:c6:e0:9f:fa:b6:b1:e8:9f:bd:73:
                    d5:60:19:d7:81:fe:48:94:1f:e2:26:65:20:36:ca:
                    2f:34:4f:6d:25:84:8d:c3:f6:82:1b:f8:6f:70:88:
                    bf:13:ca:ec:c8:a9:f8:36:1b:b9:10:4c:53:e5:40:
                    5b:0c:21:35:3e:63:b0:53:e0:b0:0d:5e:c6:0c:fa:
                    e9:23:56:9e:67:49:1c:a9:3b:4d:1c:ea:6d:d6:91:
                    2a:8e:e9:17:ae:c0:47:60:8d:d8:b4:f4:e4:5a:2e:
                    18:b5:70:44:d4:94:a8:0a:ce:88:cb:df:6f:b5:a4:
                    bc:cb:82:79:dd:d4:d9:c1:86:43:b1:b6:ba:f0:81:
                    cc:6c:0d:e7:84:a8:71:0a:fd:7a:d6:0f:0b:e4:0e:
                    48:be:6d:52:c3:a2:2d:97:fc:3d:fd:97:cb:7c:d6:
                    51:3e:a1:67:cc:e2:8b:8a:c4:16:5d:48:0c:54:72:
                    21:ee:dc:d3:42:46:2f:72:eb:44:9f:d0:47:e6:dc:
                    f9:7a:60:91:61:42:7e:2a:0b:0a:9b:e4:c2:11:02:
                    09:73:65:da:c6:84:45:e3:94:07:a9:ac:2d:67:62:
                    d0:8a:b6:dc:11:65:33:2c:ea:9e:f5:72:b7:21:58:
                    1f:bc:43:9b:92:68:5c:d6:bb:b5:63:d3:c3:73:4d:
                    0d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7C:DE:33:F3:8B:6A:95:87:A4:42:3A:F9:76:9A:15:4F:D1:A1:64
            X509v3 Authority Key Identifier:
                keyid:E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/AAA9E87A8F4811F19F9849D84411F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5720:fff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8a:a1:41:2f:11:c5:55:94:c1:89:87:03:4d:86:c0:80:a0:d2:
         13:45:41:57:27:9b:ca:0f:81:7e:4b:a0:ab:59:f2:ed:cd:b4:
         5c:c3:91:32:a2:03:17:dc:49:3f:10:86:5f:5c:73:90:50:4e:
         ea:2d:89:c8:c8:90:1c:f6:9a:45:ce:f1:89:f0:f5:11:1c:22:
         c5:e5:0b:f1:f1:70:19:a9:52:82:eb:0f:d9:2a:38:7f:bd:85:
         44:e8:08:79:d9:f4:61:75:4a:e5:98:e4:15:b3:b1:d6:8d:17:
         e4:91:18:6f:ae:0f:eb:29:f0:7c:b8:41:4f:b0:b8:e8:ca:18:
         9b:32:12:df:f5:27:64:4c:0e:db:95:1b:15:20:7f:ac:e3:3f:
         01:02:ba:33:78:ca:80:91:da:c1:9b:88:43:28:b7:37:db:b6:
         56:ba:46:e8:75:05:2d:a0:79:e5:0f:de:a6:f6:a8:42:a7:7a:
         ef:e5:84:f6:55:2b:67:07:bb:f2:6c:e7:6e:5a:e5:69:7f:b0:
         e6:29:57:2c:a5:b4:ae:c2:c4:39:d9:65:e3:d6:9f:de:a9:ad:
         b4:54:cd:e5:83:df:25:a7:e8:ac:fd:27:39:62:ea:bd:0b:e7:
         34:c2:a4:ec:ba:d5:03:6a:2b:bc:7f:3d:0b:75:c6:a1:66:cd:
         ca:01:53:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:29 2026 by rpki-client